Actually i removed that and if you notice now just matching by identity and I can see from the debugs that it is picking up the right profile.
crypto isakmp profile ISAKMP_PROF match identity group CCIE Also, when I add OU=CCIE the IOS parser converts that and shows up as ou = ccie on the sh run. On Sat, Jul 21, 2012 at 4:04 PM, Karthik sagar <[email protected]> wrote: > In your certificate map, the line 'subject-name co ou = ccie', can you > try removing the spaces between 'ou = ccie'. I think the certificate > matching is not happening correctly. Also, I am not sure if the matching is > case insensitive. > > Regards, > Karthik >
_______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com Are you a CCNP or CCIE and looking for a job? Check out www.PlatinumPlacement.com
